vx-underground
I'm a big fan of Windows 11. One of my favorite features, which really boosts productivity, is the UI crashes (explorer), and whatever UI element was highlighted is now forever stuck in-memory. "Copy" is stuck in the middle of my screen. I won't go away.β¦
IT'S BEEN 8 DAYS
π€£124β€7π₯4β€βπ₯1π’1
> be me
> get message from TorGuard owner
> "i found goop" (malware)
> wtf let me see goop (malware)
> sends link
> look inside
> "width-table v0.1.0"
> malicious rust crate
> imported into "Polymarket-5min-bot"
> by "crazygirl437" on GitHub
> code walks directory and uploads files to website
> "checkenv(.)cloud"
> lol its for a rust crate that sets a table width
> image 1
> neat
> hmmmm
> beep boop search
> find X posts
> malware campaign on X
> verified accounts sending link to people
> "crazygirl437/hyper-grid"
> image 2
> more verified accounts posting stuff
> lots of impressions and likes
> image 3
Chat, we've got a full-blown Threat Actor malware campaign right here on Xitter and it is active as we speak (image 4).
Although, it is primarily social engineering work. It is spam, pushed by verified X accounts, that delivers an open-source-malware information stealer.
tl;dr free goop for everyone
> get message from TorGuard owner
> "i found goop" (malware)
> wtf let me see goop (malware)
> sends link
> look inside
> "width-table v0.1.0"
> malicious rust crate
> imported into "Polymarket-5min-bot"
> by "crazygirl437" on GitHub
> code walks directory and uploads files to website
> "checkenv(.)cloud"
> lol its for a rust crate that sets a table width
> image 1
> neat
> hmmmm
> beep boop search
> find X posts
> malware campaign on X
> verified accounts sending link to people
> "crazygirl437/hyper-grid"
> image 2
> more verified accounts posting stuff
> lots of impressions and likes
> image 3
Chat, we've got a full-blown Threat Actor malware campaign right here on Xitter and it is active as we speak (image 4).
Although, it is primarily social engineering work. It is spam, pushed by verified X accounts, that delivers an open-source-malware information stealer.
tl;dr free goop for everyone
β€84π24β€βπ₯2π₯1π’1
Shoutout to @recogard and @eugenepage_ for the malware campaign. Your campaign has been undetected for a month, that's pretty good
X (formerly Twitter)
Recogard (@recogard) on X
@Polymarket geek | degening around
β€56π9π4π4β€βπ₯3π₯2π’1
This media is not supported in your browser
VIEW IN TELEGRAM
Some guy named Dulgex just made this for me and I'm so happy omg this is awesome thank you so much bro
β€148π32π₯13β€βπ₯9π€6π₯°4π€3π1π’1
Hello,
So uh, a long time ago I said I was giving away tickets to DEFCON for free. A lot of people have DM'd me about it.
I can't go into too much detail about. I don't want to diss anyone, or throw shade at anyone, because I myself don't even know what the fuck happened. But, we had the money for tickets to DEFCON. We had sponsorship money. We had all the goop ready to go.
However, for reasons I don't understand, certain people, or peoples, or individuals, or whatever, were unable to effectively communicate with us and we weren't able to do the stuff we needed to do to give away free tickets.
We ended up refunding the money to the sponsors who gave us money for DEFCON tickets. I don't know, bro.
We'll try again next year, I guess
So uh, a long time ago I said I was giving away tickets to DEFCON for free. A lot of people have DM'd me about it.
I can't go into too much detail about. I don't want to diss anyone, or throw shade at anyone, because I myself don't even know what the fuck happened. But, we had the money for tickets to DEFCON. We had sponsorship money. We had all the goop ready to go.
However, for reasons I don't understand, certain people, or peoples, or individuals, or whatever, were unable to effectively communicate with us and we weren't able to do the stuff we needed to do to give away free tickets.
We ended up refunding the money to the sponsors who gave us money for DEFCON tickets. I don't know, bro.
We'll try again next year, I guess
π’99β€22π€£8π«‘7π€2π1
vx-underground
Hello, So uh, a long time ago I said I was giving away tickets to DEFCON for free. A lot of people have DM'd me about it. I can't go into too much detail about. I don't want to diss anyone, or throw shade at anyone, because I myself don't even know whatβ¦
I really don't want to throw shade at anyone, but it's super confusing, because we had a giant pile of cash from sponsors. We said, "Hello, we would like to use this giant pile of cash". They pretty much said, "Okay, cool, one moment" ... then kind of radio silence.
I assume DEFCON likes money, so I don't know what happened.
I assume DEFCON likes money, so I don't know what happened.
π’64β€9π€£7π±1π1
> get dm
> "smelly, is this goop?" (malware)
> "i found it on x"
> links GitHub
> download
> look inside
> .net goop
> didnt strip metadata
> internally refers to itself as FunkyStar
> internally does "ProcessAlpha", "ProcessBeta", etc
Not only is this shit slop malware, the author of this malware is larping to themselves as like, some sort of military operation. My brother in Christ, I'm happy you're feeling peppy about your slop malware, but you ARE NOT writing state-sponsored malware.
> "smelly, is this goop?" (malware)
> "i found it on x"
> links GitHub
> download
> look inside
> .net goop
> didnt strip metadata
> internally refers to itself as FunkyStar
> internally does "ProcessAlpha", "ProcessBeta", etc
Not only is this shit slop malware, the author of this malware is larping to themselves as like, some sort of military operation. My brother in Christ, I'm happy you're feeling peppy about your slop malware, but you ARE NOT writing state-sponsored malware.
π86π€£23π₯°8β€6π’2π₯1
vx-underground
> get dm > "smelly, is this goop?" (malware) > "i found it on x" > links GitHub > download > look inside > .net goop > didnt strip metadata > internally refers to itself as FunkyStar > internally does "ProcessAlpha", "ProcessBeta", etc Not only is this shitβ¦
What I find so impressive though is that this malware has been active on GitHub FOR A YEAR.
Dawg, they're banning security researchers and this malware has been present FOR A YEAR
https://github.com/Alisterscaics185/Crypto-Checker-Seed-Phrases
Dawg, they're banning security researchers and this malware has been present FOR A YEAR
https://github.com/Alisterscaics185/Crypto-Checker-Seed-Phrases
GitHub
GitHub - Alisterscaics185/Crypto-Checker-Seed-Phrases: Phrases Checker - advanced seed phrase analysis tool. Security utility forβ¦
Phrases Checker - advanced seed phrase analysis tool. Security utility for checking seed phrase validity, balance checking, and wallet security assessment across multiple blockchains. - Alisterscai...
π€―67β€9β€βπ₯4π―2π1π’1π1π€£1
I like writing malware because, instead of making useful and productive software, you spend an absurd amount of time writing a really over complicated and convoluted way to create a file.
A simple line or two of code becomes like 50 lines.
It's fun, I don't know why
A simple line or two of code becomes like 50 lines.
It's fun, I don't know why
β€82π₯°32π―10π’1
This media is not supported in your browser
VIEW IN TELEGRAM
> get dm
> "someone defaced health institute for czech republic"
> look at website
> indeed they did
> they leave a telegram handle
> dm them
> say hello
> "haha check this out bro"
> adds "smelly" to website
> lists "smelly" as a "crew member"
chat, we are cooked
> "someone defaced health institute for czech republic"
> look at website
> indeed they did
> they leave a telegram handle
> dm them
> say hello
> "haha check this out bro"
> adds "smelly" to website
> lists "smelly" as a "crew member"
chat, we are cooked
π154π€£114π«‘17π₯°6π’5β€4π3π₯1
vx-underground
> get dm > "someone defaced health institute for czech republic" > look at website > indeed they did > they leave a telegram handle > dm them > say hello > "haha check this out bro" > adds "smelly" to website > lists "smelly" as a "crew member" chat, we areβ¦
o ok, thank god they removed it, i was afraid the knedliky police were gonna come to my house and beat me to death with knedliky
close one
close one
β€103π€£43π₯°13π8π’4π3
Oh yeah? You're a "hacker"? Prove it.
Show me your $600 entry ticket for Slermie Doop 16 and massive collection of cybersecurity vendor merchandise you either received for free or purchased.
You're not a real hacker until you're a walking billboard for tech companies
Show me your $600 entry ticket for Slermie Doop 16 and massive collection of cybersecurity vendor merchandise you either received for free or purchased.
You're not a real hacker until you're a walking billboard for tech companies
π€£87β€24π8π’4π€2β€βπ₯1π―1
vx-underground
Oh yeah? You're a "hacker"? Prove it. Show me your $600 entry ticket for Slermie Doop 16 and massive collection of cybersecurity vendor merchandise you either received for free or purchased. You're not a real hacker until you're a walking billboard for techβ¦
Hahahahaha. What? You can't afford a ticket to Slermie Doop??? Sounds like you're POOR. Sorry, kid. We're HACKERS. We fucking HATE poor people.
Next thing you're going to do is say you can't afford the $2,000 Schmeemee certificate, proving you're a real hacker.
Next thing you're going to do is say you can't afford the $2,000 Schmeemee certificate, proving you're a real hacker.
π€£123β€21π₯°6π5π’3π€2β€βπ₯1π―1
It makes me very happy receiving DMs of malware and people asking "is this goop?".
There is a real-world chance that we can fundamentally corrupt people to begin referring to malware as "goop", and making our entire industry look like a fucking joke
That's so badass omg
There is a real-world chance that we can fundamentally corrupt people to begin referring to malware as "goop", and making our entire industry look like a fucking joke
That's so badass omg
β€162π₯°33β€βπ₯12π€£9π7π€4π3π€―3π2π€2π’1
Chat, I'm unironically a big fan of AI now
I don't vibe code, or whatever, but it's ability to generate me slop Python scripts for reverse engineering, or it's ability to help me troubleshoot Linux gunk, is absolutely incredible.
I'll say, "Hey ChatGPT, I've got this goop that is doing X, Y, Z. Can you make me a Python script that handles it?".
My Python is trash, but ChatGPT is like, "I got you, big dawg", and gives me the thingie I need in just a few seconds, saving me tons of time browsing StackOverflow or screaming at my IDE about syntax issues.
Thank you, OpenAI, for giving me ultra mega slop Python maker 9000. It is incredibly helpful to me.
Oh, and I've never had OpenAI give me any warnings and stuff about potential violations or whatever. Anthropic complained all the time. I'm not verified by OpenAI as a cybersecurity professional, ... I just ask for slop Python and it produces magic. I don't know how it works, but it's cool and badass
I don't vibe code, or whatever, but it's ability to generate me slop Python scripts for reverse engineering, or it's ability to help me troubleshoot Linux gunk, is absolutely incredible.
I'll say, "Hey ChatGPT, I've got this goop that is doing X, Y, Z. Can you make me a Python script that handles it?".
My Python is trash, but ChatGPT is like, "I got you, big dawg", and gives me the thingie I need in just a few seconds, saving me tons of time browsing StackOverflow or screaming at my IDE about syntax issues.
Thank you, OpenAI, for giving me ultra mega slop Python maker 9000. It is incredibly helpful to me.
Oh, and I've never had OpenAI give me any warnings and stuff about potential violations or whatever. Anthropic complained all the time. I'm not verified by OpenAI as a cybersecurity professional, ... I just ask for slop Python and it produces magic. I don't know how it works, but it's cool and badass
β€131π€£50π€12π’11π―6π€―4π4π3π₯3π₯°3π2